Evidence record / hermes-agent
A dated record of one change, kept so the writing that cites it can be checked. Compiled from the sources listed below by the research run, not written for reading. The judgment lives in the issues that cite it, below.
2026-10-13-hermes-agent-diagnostic-dumps-redact-credentials-embedded-in-base-urls
Diagnostic dumps redact credentials embedded in base URLs. Fallback-provider base URLs could preserve userinfo, query or fragment tokens in hermes dump and uploaded debug bundles despite force redaction. The fix requests strict URL-credential redaction in dump/upload paths and preserves canonical hyphenated sensitive parameter names. security.redact_secrets=True was a default, not complete path coverage.
Channel: tagged-release (first stable v0.21.6). Half: defect. Date: 2026-09-29.
Operator consequence: Inspect bundles already shared for URL credentials and revoke exposed tokens. Upgrade to v0.21.6+ before producing another diagnostic bundle; avoid assuming the ordinary log redaction policy strips every URL token.
Receipt
Finding metadata
Run: 2026-10-13-profile-refresh-2026-09-21_2026-10-13-frontier-v0
Finding ID: 2026-10-13-hermes-agent-diagnostic-dumps-redact-credentials-embedded-in-base-urls
Profile citations
- Hermes Agent / claim / diagnostic-url-redaction
- Hermes Agent / posture / governance
Source links
Primary links, including exact changelog lines when available.
Versioned source: run artifact